SWAG

SWAG is an open-source server application that provides an Nginx webserver and reverse proxy with PHP support. It is designed to manage secure access to web applications by automating the generation and renewal of SSL certificates through a built-in Certbot client. The software is deployed as a Docker container and supports x86-64 and arm64 architectures, making it compatible with a wide range of hardware from standard servers to ARM-based single board computers.

Users typically deploy SWAG to handle incoming web traffic and route it to various backend services. It supports both HTTP and DNS validation for certificate acquisition, integrating with providers such as Cloudflare and DuckDNS. The application also includes intrusion prevention tools to protect the server from common attacks by monitoring logs and blocking malicious IP addresses. It is often used as the primary entry point for a home server or a small data center environment.

Key features

• Automated SSL certificate generation and renewal via Let's Encrypt and ZeroSSL
• Integrated Nginx webserver and reverse proxy with PHP support
• Built-in fail2ban for intrusion prevention with five default jails
• Support for DNS validation through various Certbot plugins
• Ability to generate pfx and private-fullchain-bundle pem certificates for other containers
• Support for password protection using htpasswd or LDAP authentication
• Preset reverse proxy configuration files for popular applications

The application is built on a custom base image with an s6 overlay, ensuring regular security and OS updates across the LinuxServer.io ecosystem. It allows for easy user mapping via PUID and PGID environment variables to manage file permissions on the host system. For advanced security, it ships with ffdhe4096 as the dhparams.pem per RFC7919 and allows the modification of iptables when granted NET_ADMIN capabilities. Users can further customize the environment by adding additional Certbot plugins via a universal package install mod.

SWAG is intended for users who need a centralized gateway to manage SSL certificates and traffic routing for self-hosted services.